The whole book, folded to a page.
The Register
176 obligations across 72 jurisdictions — 131 in force, 39 with a set date, 6 proposed. Open a jurisdiction for its one-line register; every row keeps its date, roles, confidence, primary source and checked date. Largest registers first.
Show
US United States 57 tracked Alabama AI Health Insurance Transparency Act (SB 63) next 1 Oct 2026
- in force since 1 Jan 2023 US · NYC NYC Local Law 144 — AEDT bias audit hiring · deployer
- in force since 19 May 2025 US · Federal TAKE IT DOWN Act deployer · chatbot
- in force since 1 Oct 2025 US · MD Maryland AI Utilization Review Requirements (HB 820 / Ch.747) deployer
- in force since 5 Nov 2025 US · NY AI Companion Models Law (GBL Art. 47) chatbot
- in force since 11 Dec 2025 US · NY New York Deceased Performer Digital Replica Consent Law (S.8391 / Ch. 616) provider · deployer
- in force since 1 Jan 2026 US · CA AB 2013 — GenAI training-data transparency provider
- in force since 1 Jan 2026 US · CA California Extends Health-Profession Title-Protection Law to AI (AB 489) provider · deployer
- in force since 1 Jan 2026 US · CA California companion-chatbot safeguards (SB 243) chatbot
- in force since 1 Jan 2026 US · CA SB 53 — Frontier AI Transparency Act provider
- in force since 1 Jan 2026 US · IL Illinois AI in employment (HB 3773) hiring · deployer
- in force since 1 Jan 2026 US · OR Oregon Bars Nonhuman Entities from Nursing Titles (HB 2748) provider · deployer
- in force since 1 Jan 2026 US · TX Texas Responsible AI Governance Act (TRAIGA) provider · deployer
- in force since 23 Apr 2026 US · DE Delaware AI Agents Barred from Medical/Nursing Licensure and Titles (HB 191) provider · deployer
- in force since 22 May 2026 US · TN Tennessee AI regulation study mandate (SB 1700 / PC 1082, "CHAT Act") provider · deployer
- in force since 9 Jun 2026 US · NY New York Synthetic Performer Disclosure Law (S.8420-A / Ch. 617) deployer
- in force since 11 Jun 2026 US · WA Washington Bars Nonhuman Entities from Nursing Titles (HB 2155) provider · deployer
- in force since 11 Jun 2026 US · WA Washington Prior Authorization AI Transparency Act (SB 5395) deployer
- in force since 11 Jun 2026 US · WA Washington Forged Digital Likeness Protection Act (SB 5886 / Ch.69) provider · deployer
- in force since 22 Jun 2026 US · RI Rhode Island Oversight of AI in Mental Health Care Act (H 7349 Sub A) deployer · provider
- in force since 22 Jun 2026 US · RI Rhode Island Healthcare AI Documentation Act (H 7538) deployer
- in force since 1 Jul 2026 US · IA Iowa AI Prior Authorization Restrictions (HF 2635) deployer
- in force since 1 Jul 2026 US · IA Iowa Conversational AI Safety Act (SF 2417) chatbot · deployer
- in force since 1 Jul 2026 US · IN Indiana AI Healthcare Claims Disclosure Act (HB 1271 / PL 88) deployer
- in force since 1 Jul 2026 US · TN Tennessee AI Mental Health Impersonation Act (SB 1580 / PC 647) deployer · provider
- in force since 14 Jul 2026 US · HI Hawaii Deepfake Protection & Synthetic Performer Disclosure Act (HB 2137 / Act 247) deployer
- in force since 14 Jul 2026 US · HI Hawaii AI Disclosure and Safety Act (SB 3001 / Act 248) chatbot · deployer
- in force since 2 Aug 2026 US · CA California AI Transparency Act (SB 942) provider · chatbot
- in force since 12 Aug 2026 US · CO Colorado Psychotherapy AI Restrictions (HB 26-1195) deployer
- T−33 · 1 Oct 2026 US · AL Alabama AI Health Insurance Transparency Act (SB 63) deployer
- T−33 · 1 Oct 2026 US · CT Connecticut PA 26-15 (SB 5) tranche 1 — subscription AI, frontier models, synthetic content, state agencies provider · deployer
- T−33 · 1 Oct 2026 US · MD Maryland Deepfake Identity Fraud (SB 8 / Ch. 445) all roles
- T−125 · 1 Jan 2027 US · CA CA AB 2148 — K-12 School Employees and Contractors Must Be Natural Persons (AI Barred from Staff Roles) hiring · deployer
- T−125 · 1 Jan 2027 US · CA California AI Transparency Act — AB 853 large online platform & GenAI hosting platform duties provider · deployer
- T−125 · 1 Jan 2027 US · CO Colorado Healthcare AI Utilization Review Act (HB 26-1139) deployer
- T−125 · 1 Jan 2027 US · CO Colorado Conversational AI Safety Act (HB 26-1263) chatbot · deployer
- T−125 · 1 Jan 2027 US · CO Colorado AI Act (SB 26-189) deployer
- T−125 · 1 Jan 2027 US · CT Connecticut PA 26-15 (SB 5) tranche 2 — AI companion safeguards provider · chatbot
- T−125 · 1 Jan 2027 US · GA Georgia AI Prior Authorization Act (SB 444) deployer
- T−125 · 1 Jan 2027 US · IL Illinois AI Teacher Evaluation Restrictions (SB 2909 / PA 104-0565) deployer
- T−125 · 1 Jan 2027 US · IL Illinois Artificial Intelligence Safety Measures Act (SB 315 / PA 104-0538) provider
- T−125 · 1 Jan 2027 US · NY RAISE Act — frontier AI safety provider
- T−125 · 1 Jan 2027 US · OR Oregon AI Companion Act (SB 1546 / Ch.85) chatbot · deployer
- T−125 · 1 Jan 2027 US · RI Rhode Island AI Chatbot Safety Act (S 2195) chatbot · deployer
- T−125 · 1 Jan 2027 US · UT Utah AI Prior Authorization Disclosure Act (SB 319) deployer
- T−125 · 1 Jan 2027 US · WA Washington AI Companion Chatbot Safety Act (HB 2225 / Ch.168) chatbot · deployer
- T−156 · 1 Feb 2027 US · WA Washington AI Content Disclosure Act (HB 1170 / Ch.167) provider · deployer
- T−306 · 1 Jul 2027 US · GA Georgia Conversational AI Safety Act (SB 540) chatbot · deployer
- T−306 · 1 Jul 2027 US · ID Idaho Conversational AI Safety Act (SB 1297) chatbot · deployer
- T−306 · 1 Jul 2027 US · NE Nebraska Conversational Artificial Intelligence Safety Act (LB 525) deployer
- T−306 · 1 Jul 2027 US · NJ NJ FAIR Act — Algorithmic Rent-Setting Ban (A3497/S451) deployer · provider
- T−398 · 1 Oct 2027 US · CT Connecticut PA 26-15 (SB 5) tranche 3 — automated employment-related decision technology provider · deployer · hiring
- T−490 · 1 Jan 2028 US · CA California AI Transparency Act — AB 853 capture device latent disclosures provider
- T−490 · 1 Jan 2028 US · CT Connecticut PA 26-15 (SB 5) tranche 4 — covered-platform restrictions for minors provider · deployer
- T−490 · 1 Jan 2028 US · IL Illinois Transparency in Downcoding Act (SB 3114 / PA 104-0568) deployer
- proposed · 1 Oct 2026 US · MD Maryland Protection From Predatory Pricing Act (HB 895 / Ch. 154) deployer
- proposed US · Federal AI Kill Switch Act (Lieu-Moran) provider
- proposed US · IL Illinois AI Rental Price Coordination Ban (SB 343) deployer · provider
EU European Union 12 tracked Art. 50(2) marking retrofit — synthetic-content systems placed on the market before 2 Aug 2026 next 2 Dec 2026
- in force since 7 Jun 2021 EU — General TDM Exception with Rightholder Opt-Out (DSM Directive Art. 4) provider
- in force since 2 Feb 2025 Prohibited AI practices (Art. 5) all roles
- in force since 2 Aug 2025 GPAI model provider obligations (Art. 53) — docs, copyright policy, training summary provider
- in force since 2 Aug 2026 GPAI enforcement & fines (Art. 101) provider
- in force since 2 Aug 2026 Article 50 transparency & deepfake labelling provider · deployer · chatbot
- in force since 10 Aug 2026 EU AI Act — GPAI Enforcement Procedures Implementing Regulation (EU) 2026/1755 provider
- T−95 · 2 Dec 2026 Art. 50(2) marking retrofit — synthetic-content systems placed on the market before 2 Aug 2026 provider
- T−95 · 2 Dec 2026 New prohibitions — AI CSAM / intimate imagery provider · deployer
- T−338 · 2 Aug 2027 GPAI models placed on the market before 2 Aug 2025 — legacy compliance deadline (Art. 111(3)) provider
- T−460 · 2 Dec 2027 High-risk AI obligations (Annex III) provider · deployer
- T−704 · 2 Aug 2028 EU AI Act high-risk obligations (Annex I — product-embedded) provider · deployer
- T−1434 · 2 Aug 2030 High-risk AI intended for public authorities — legacy-system compliance deadline provider · deployer
CN China 7 tracked China PIPL Art. 24 — automated decision-making transparency, opt-out and explanation all in force
- in force since 1 Nov 2021 China PIPL Art. 24 — automated decision-making transparency, opt-out and explanation provider · deployer · hiring
- in force since 1 Mar 2022 CAC Algorithmic Recommendation Provisions — disclosure, opt-out and algorithm filing provider · deployer · chatbot
- in force since 10 Jan 2023 Deep Synthesis Provisions provider · chatbot
- in force since 15 Aug 2023 Generative AI Interim Measures provider · chatbot
- in force since 1 Sep 2025 AI-content labelling (+ GB 45438-2025) provider · deployer · chatbot
- in force since 8 May 2026 China AI Agents Implementation Opinions (CAC/NDRC/MIIT) provider · deployer
- in force since 15 Jul 2026 Anthropomorphic AI Interactive Services Measures provider · chatbot
UK United Kingdom 6 tracked UK DUAA 2025 — Automated Decision-Making reform (Arts. 22A–22D) 5 in force
- in force since 5 Feb 2026 UK DUAA 2025 — Automated Decision-Making reform (Arts. 22A–22D) provider · deployer
- in force since 6 Feb 2026 UK DUAA 2025 s.138 — Non-consensual deepfake creation/request offences all roles
- in force since 12 May 2026 UK SI 2026/425 — mandatory ICO code of practice on AI and automated decision-making provider · deployer
- in force since 29 Jun 2026 Crime and Policing Act 2026 — AI-generated CSAM and deepfake offences provider · deployer
- in force Sectoral regulator AI principles all roles
- proposed AI (Regulation) Bill [HL] proposed provider · deployer
BR Brazil 4 tracked Brazil ECA Digital Art. 31 — semi-annual transparency report, first due 17 September 2026 next 17 Sep 2026
- in force since 18 Sep 2020 Brazil LGPD Art. 20 — right to review of solely-automated decisions deployer · hiring
- in force since 17 Mar 2026 Brazil ECA Digital (Lei 15.211/2025) — algorithmic duties for services used by minors provider · deployer
- T−19 · 17 Sep 2026 Brazil ECA Digital Art. 31 — semi-annual transparency report, first due 17 September 2026 provider · deployer
- proposed AI Act bill (PL 2338/2023) advancing provider · deployer
KZ Kazakhstan 4 tracked AI Law art. 17(3) — seven AI capabilities banned outright, and the owner classifies its own risk tier all in force
- in force since 18 Jan 2026 AI Law art. 17(3) — seven AI capabilities banned outright, and the owner classifies its own risk tier provider · deployer
- in force since 18 Jan 2026 AI Law art. 18 — lifecycle risk management, refreshed at least yearly, and it is the penalised duty provider · deployer
- in force since 18 Jan 2026 AI Law art. 21 — tell users AI was involved, and machine-readably mark every synthetic output you distribute provider · deployer
- in force since 18 Jan 2026 Personal Data Law art. 19-1 — automated processing that changes your rights is banned without consent, and objections get three working days deployer · hiring
RU Russia 4 tracked 243-FZ art. 10(1) — whoever lets you use a large foundational model has to tell you who owns the output next 1 Mar 2027
- in force since 26 Jan 2007 152-FZ art. 16 — a solely automated decision is forbidden unless the person signed a written consent deployer · hiring · provider
- T−184 · 1 Mar 2027 243-FZ art. 10(1) — whoever lets you use a large foundational model has to tell you who owns the output provider
- T−184 · 1 Mar 2027 243-FZ art. 8 — three developer duties that attach only once a model takes sovereign or national status provider
- T−184 · 1 Mar 2027 243-FZ art. 9 — platforms above 500,000 daily users enable an AI label; nobody is made to apply one provider · deployer
JP Japan 3 tracked Japan Election AI Labelling & Platform Obligations (2026 Amendment) next 1 Mar 2027
- in force since 1 Jan 2019 Japan — AI Training / Information Analysis Exception (Copyright Act Art.30-4) provider
- in force since 1 Sep 2025 AI Promotion Act in force all roles
- T−184 · 1 Mar 2027 Japan Election AI Labelling & Platform Obligations (2026 Amendment) deployer · provider
KG Kyrgyzstan 3 tracked Digital Code art. 197 - tell consumers they are talking to an AI, tell people they are being emotion- or biometrically classified, and label deepfakes all in force
- in force since 6 Feb 2026 Digital Code art. 197 - tell consumers they are talking to an AI, tell people they are being emotion- or biometrically classified, and label deepfakes chatbot · provider · deployer
- in force since 6 Feb 2026 Digital Code arts. 191-193 - every AI system used in the country must be danger-assessed, and both the method and the result must be published provider · deployer
- in force since 6 Feb 2026 Digital Code arts. 194-196 - self-classified high-danger AI needs a signed public declaration of conformity before first use provider · deployer
KR South Korea 3 tracked Korea PIPA Art. 37-2 — rights against fully automated (AI) decisions all in force
- in force since 15 Mar 2024 Korea PIPA Art. 37-2 — rights against fully automated (AI) decisions provider · deployer · hiring
- in force since 22 Jan 2026 AI Basic Act — high-impact AI duties provider · deployer
- in force since 22 Jan 2026 AI Basic Act — transparency & labelling provider · deployer · chatbot
UZ Uzbekistan 3 tracked Personal Data Law art. 24 — solely automated decisions all in force
- in force since 1 Oct 2019 Personal Data Law art. 24 — solely automated decisions deployer
- in force since 21 Jan 2026 Law on Informatization art. 7¹ — AI must not harm, and no decision on AI output alone provider · deployer
- in force since 21 Jan 2026 Administrative Liability Code art. 46² part 2 — unlawful AI processing of personal data all roles
VN Vietnam 3 tracked AI-content labelling & interaction disclosure all in force
- in force since 1 Mar 2026 AI-content labelling & interaction disclosure provider · chatbot
- in force since 1 Mar 2026 Law on AI — risk-tiered obligations provider · deployer
- in force since 15 Aug 2026 Vietnam Decision 33 — 46 High-Risk AI Systems List provider · deployer
AL Albania 2 tracked Law 124/2024 art. 20 — GDPR art. 22 transposed, in force since 1 February 2025, penalised at 2 billion lekë or 4% of global turnover all in force
- in force since 1 Feb 2025 Law 124/2024 art. 20 — GDPR art. 22 transposed, in force since 1 February 2025, penalised at 2 billion lekë or 4% of global turnover deployer · hiring
- in force since 1 Feb 2025 Law 124/2024 art. 53 — solely automated decisions banned for police, prosecutors and security bodies, plus an exceptionless ban on discriminatory profiling deployer
CA Canada 2 tracked Quebec Law 25 — automated decision transparency 1 in force
- in force since 22 Sep 2023 Quebec Law 25 — automated decision transparency deployer · hiring
- proposed Federal AIDA (Bill C-27) — abandoned provider · deployer
CL Chile 2 tracked Ley 19.628 Art. 8° bis (inserted by Ley 21.719) — right to object to solely-automated decisions and profiling next 1 Dec 2026
- in force since 1 Sep 2022 Código del Trabajo Cap. X — ban on discriminatory automated decision-making and algorithm access for digital-platform work deployer · hiring
- T−94 · 1 Dec 2026 Ley 19.628 Art. 8° bis (inserted by Ley 21.719) — right to object to solely-automated decisions and profiling deployer · provider
MX Mexico 2 tracked LFT Capítulo IX Bis — algorithmic work-management policy and human review for digital-platform workers all in force
- in force since 22 Jun 2025 LFT Capítulo IX Bis — algorithmic work-management policy and human review for digital-platform workers deployer · hiring
- in force since 15 May 2026 LFT/LFDA reform — AI use of performers deployer
MD Moldova 2 tracked Law 160/2026 art. 11 — a flat ban on solely automated decisions by police, prosecutors, courts and prisons all in force
- in force since 23 Aug 2026 Law 160/2026 art. 11 — a flat ban on solely automated decisions by police, prosecutors, courts and prisons deployer
- in force since 23 Aug 2026 Law 195/2024 art. 22 — GDPR art. 22 transposed verbatim, in force since 23 August 2026, with the fine phased in over three years deployer · hiring
RS Serbia 2 tracked Personal Data Law art. 38 — GDPR art. 22 transposed, applicable since 22 August 2019, penalty in fixed dinars all in force
- in force since 22 Aug 2019 Personal Data Law art. 38 — GDPR art. 22 transposed, applicable since 22 August 2019, penalty in fixed dinars deployer · hiring
- in force since 22 Aug 2019 Personal Data Law art. 39 — solely automated decisions banned for police, prosecutors and prisons, plus an exceptionless ban on discriminatory profiling deployer
SG Singapore 2 tracked Singapore — Computational Data Analysis Exception (Copyright Act 2021 s.244) all in force
- in force since 21 Nov 2021 Singapore — Computational Data Analysis Exception (Copyright Act 2021 s.244) provider
- in force since 5 Aug 2026 Singapore MAS — Agentic AI in Scope of Supervisory Expectations (binding AI Risk Management Guidelines pending) provider · deployer
··· …and 53 more jurisdictions with one tracked instrument each, Algeria to Zambia 53 tracked next 10 Dec 2026
- in force since 11 Nov 2000 Argentina Ley 25.326 Art. 20 — judicial and administrative decisions may not rest solely on automated profiling deployer
- in force since 25 Jan 2008 Senegal Loi 2008-12 art. 48 — no decision with legal effects on the sole basis of automated profiling, and no judicial appraisal of conduct founded on one at all deployer · provider · hiring
- in force since 28 Aug 2008 Uruguay Ley 18.331 art. 16 — an automated-decision right that started out automation-blind, and the only one that makes the program itself explainable deployer
- in force since 5 Mar 2009 Morocco Loi 09-08 art. 11 — neutrality of the effects of automated processing: bar on decisions grounded solely in automated profiling deployer · provider · hiring
- in force since 6 Jun 2010 Azerbaijan Law on Personal Data art. 7.3 — an objection right against decisions taken by information technology, whose remedy is re-processing by another method or a full stop deployer
- in force since 17 Jun 2011 Angola Lei 22/11 art. 29.º — decisões individuais automatizadas: the only prohibition on the tracker that the data-protection authority can licence deployer · hiring
- in force since 17 Aug 2012 Montenegro ZZPL art. 15a — a Directive 95/46 art. 15 prohibition, not a GDPR art. 22 right: no consent exit, no human-intervention safeguard, and no fine attached to the prohibition itself deployer
- in force since 16 Oct 2012 Ghana Data Protection Act s. 41 — notice-based right against solely-automated decisions, plus an automatic duty to notify and reconsider deployer · provider · hiring
- in force since 20 Dec 2012 Ukraine Personal Data Law art. 8 — protection from automated decisions, and a right to know the mechanism deployer
- in force since 28 Jun 2013 Mali Loi 2013-015 art. 2 — a one-limb bar, stated as a founding principle, on decisions with legal effects resting solely on computerised profiling, with no exception of any kind deployer · provider · hiring
- in force since 8 Aug 2013 Côte d'Ivoire Loi 2013-450 art. 25 — no judicial, administrative or private decision appraising human conduct may rest on automated profiling, with no carve-out at all deployer · provider · hiring
- in force since 9 Jan 2015 Madagascar Loi n° 2014-038 art. 3 — the wide automated-decision bar stated as a founding principle, with no exception and a 5% turnover catch-all behind it deployer · provider · hiring
- in force since 10 May 2016 São Tomé e Príncipe Lei 3/2016 art. 13.º — the Lusophone prohibition without Angola's regulator escape hatch, and with a right to the reasons deployer · hiring
- in force since 22 Jul 2016 Equatorial Guinea Ley 1/2016 art. 13(b) — impugnación de valoraciones: disclose the program, challenge any decision, but nothing forbids the machine deployer
- in force since 28 Jul 2016 Guinea Loi L/2016/037/AN art. 27 — the strictest Francophone automated-decision bar, with no exception of any kind and a general penalty running to 7% of turnover deployer · provider · hiring
- in force since 9 Sep 2016 Philippines Data Privacy Act IRR Secs. 34 and 48 — automated decision-making: logic disclosure, NPC notification and the consent bar deployer · provider · hiring
- in force since 7 Oct 2016 Türkiye KVKK art. 11(g) — a right to object with no offence of its own to enforce it deployer · hiring
- in force since 22 Jul 2017 Mauritania Loi n° 2017-020 art. 19 — the pre-GDPR bar with no exception at all, and a judicial limb the others do not have deployer · hiring
- in force since 15 Jan 2018 Mauritius Data Protection Act 2017 s. 38 — the African automated-decision bar that a criminal penalty actually backs deployer · hiring
- in force since 20 Apr 2018 Benin Code du numérique art. 401 — a Directive-shaped bar widened to significant effects, with profiling named, mandatory safeguards inside the exception and a full logic-disclosure right deployer · provider · hiring
- in force since 12 Mar 2019 Kosovo Law 06/L-082 art. 21 — GDPR art. 22 with the words «legal» and «significantly» missing from the trigger, and no fine attached to the right itself deployer
- in force since 3 May 2019 Uganda Data Protection and Privacy Act s. 27 — notice-based right against solely-automated decisions, an automatic duty to notify and reconsider on a twenty-one-day clock, and a fourteen-day route to the regulator deployer · provider · hiring
- in force since 29 Oct 2019 Togo Loi 2019-014 art. 27 — a judicial limb, a legal-effects limb and a contract carve-out: the Directive 95/46 shape, not the wider ECOWAS one deployer · provider · hiring
- in force since 7 Nov 2019 Republic of the Congo Loi n° 29-2019 art. 13 — the Directive-shaped bar whose fine arrives only if the controller defies the formal notice deployer · provider · hiring
- in force since 25 Nov 2019 Kenya Data Protection Act s. 35 — right against solely-automated decisions, with written notification and a right to reconsideration deployer · provider · hiring
- in force since 24 Feb 2020 North Macedonia ZZLP art. 26 — GDPR art. 22 transposed almost word for word, in force since 24 February 2020, with a 4%-of-income fine and no euro alternative underneath it deployer
- in force since 1 Jul 2020 South Africa POPIA s. 71 — bar on decisions taken solely on automated processing that profiles the data subject deployer · provider · hiring
- in force since 30 Mar 2021 Burkina Faso Loi 001-2021/AN art. 15 — a two-limb bar with no exception, backed by art. 19's reasoning and artificial-intelligence disclosure right and by art. 31's prior authorisation for predictive-AI decision support deployer · provider · hiring
- in force since 1 Apr 2021 Zambia Data Protection Act 2021 s. 62 — the GDPR-shaped automated-decision bar that no offence backs deployer · hiring
- in force since 16 Apr 2021 Cabo Verde Lei 133/V/2001 art. 23.º — the Lusophone prohibition rewritten to the GDPR's shape, and the second the regulator can licence deployer · hiring
- in force since 15 Oct 2021 Rwanda Law No. 058/2021 art. 21 — right not to be subject to a decision based on automated data processing deployer · provider · hiring
- in force since 17 Oct 2022 Indonesia UU 27/2022 (PDP Law) Arts. 10 and 34 — objection to solely-automated decisions and mandatory impact assessment deployer · provider
- in force since 16 Dec 2022 Niger Loi 2022-59 art. 52 — automated individual decisions: a two-limb bar, a right to know and contest the reasoning, and an express artificial-intelligence disclosure duty at collection deployer · provider · hiring
- in force since 13 Mar 2023 Democratic Republic of the Congo Code du numérique art. 209 — the logic behind the decision must be disclosed, but no decision is ever forbidden deployer
- in force since 1 May 2023 Tanzania Personal Data Protection Act s. 36 — rights in relation to automated decision making, with a duty to notify and reconsider deployer · provider · hiring
- in force since 8 Jun 2023 Mozambique Malabo Convention art. 14(5) — the automated-decision bar that binds by treaty, in a country with no data-protection law deployer · hiring
- in force since 8 Jun 2023 Namibia Malabo Convention art. 14(5) — the second country where the automated-decision bar arrives only by treaty deployer · hiring
- in force since 12 Jun 2023 Nigeria Nigeria Data Protection Act s. 37 — right against solely-automated decisions, with a duty to provide human intervention on request deployer · provider · hiring
- in force since 15 Jul 2023 Gabon Loi n° 025/2023 art. 77 — the recast that carries the Francophone family's only statutory definition of artificial intelligence deployer · provider · hiring
- in force since 21 Aug 2023 Thailand Royal Decree on Digital Platform Service Businesses Sec. 17 — publication of the main parameters of ranking, advertising and review algorithms provider · deployer
- in force since 1 Sep 2023 Switzerland revFADP art. 21 — the automated-decision article that never prohibits anything deployer · hiring
- in force since 25 Jan 2024 Central African Republic Loi 24.001 art. 30 — the access limb without the bar: the only tracked statute that lets you contest an automated decision but never forbids one deployer
- in force since 1 Mar 2024 Georgia Law on Personal Data Protection art. 19 — a GDPR-shaped automated-decision right whose exceptions cover only profiling, whose safeguards must be asked for, and whose fine tops out at GEL 20 000 deployer
- in force since 23 Dec 2024 Cameroon Loi n° 2024/017 art. 44 — the first GDPR-shaped bar in Francophone Africa, in the only African statute that makes profiling itself a crime deployer · provider · hiring
- in force since 24 Jul 2025 Algeria Loi 18-07 art. 45 bis 1 (ex-art. 11) — the automated-decision rule now reaches only criminal-justice processing; Loi 25-11 repealed the general-purpose rule outright deployer
- in force since 4 Oct 2025 Bosnia and Herzegovina ZZLP arts. 24 and 67 — GDPR art. 22 and LED art. 11 in one state-level act since 4 October 2025, with «participation of a natural person in the decision» in place of human intervention deployer
- in force since 1 Jan 2026 UAE DIFC Data Protection Regulation 10 provider · deployer
- in force since 22 Jan 2026 Peru AI Law 31814 + Reglamento — risk-based regime provider · deployer
- in force since 20 Feb 2026 India IT Rules — synthetic-content (deepfake) labelling provider · deployer · chatbot
- in force since 10 Mar 2026 Burundi Loi 1/03 arts. 19-20 — the automated decision a human must retake from scratch, and the first statute here to name AI in an operative duty deployer
- in force since 29 Jul 2026 DE Germany AI Market Surveillance Act (KI-MIG) provider · deployer
- in force since 12 Aug 2026 Saudi Arabia Saudi Arabia — AI Training Exemption (Copyright Law Art.26) provider
- T−103 · 10 Dec 2026 AU Australia Automated Decision-Making Transparency (Privacy Act APP 1.7–1.9) provider · deployer
Not legal advice. Status is relative to the last verification (29 Aug 2026); every row links to its primary source and its jurisdiction dossier. Full dataset: obligations.json (CC BY 4.0).
Chronological timeline · Jurisdiction dossiers · Back to the Radar